not really defending salesforce but OAuth+REST is a pain? Pretty plain vanilla in terms of integration requirements.